#1General purpose tools for collecting various types of information about targets.
Kitploit recommended
penafieljlm/inquisitorOpinionated organisation-centric OSINT footprinting inspired from recon-ng and Maltego
cred-club/artifAn advanced real time threat intelligence framework to identify threats and malicious web traffic on the basis of IP reputation and historical data.
1n3/xsstracerA small python script to check for Cross-Site Tracing (XST)
xoreaxeaxeax/mmioticLatency x-ray for undocumented hardware
mdp/linkedin-extension-fingerprintingDocuments and identifies 2,953 Chrome extensions silently probed by LinkedIn, providing tools to fetch extension names and analyze browser…
gr1mmie/autoenumAutomatic Service Enumeration Script
mpgn/cve-2019-5418CVE-2019-5418 - File Content Disclosure on Ruby on Rails
01rabbit/pakuriSemi-automated penetration testing framework with TUI, integrating Nmap, OpenVAS, Metasploit, and Faraday for streamlined information gathering,…
oldboy21/ldap-password-hunterAutomated tool that hunts for world-readable passwords in Active Directory LDAP databases by leveraging Kerberos authentication and ldapsearch to…
a2awais/threat-huntingCurated collection of threat hunting and detection queries for CrowdStrike Falcon (CQL) and Microsoft Defender XDR (KQL), mapped to MITRE ATT&CK…
anshumanbh/kubebotA security testing Slackbot built with a Kubernetes backend on the Google Cloud Platform
olizimmermann/s3dnsPassive DNS server that detects exposed cloud storage buckets (AWS S3, GCP, Azure) by resolving DNS requests, tracing CNAME chains, and flagging…
bhavsec/autopentest-aiAgentic Pentesting MCP server that discovers, exploits, and reports web application vulnerabilities.
bitbrute/evillimiter-windowsTool that monitors, analyzes and limits the bandwidth of devices on the local network without administrative access (for Windows only)
galkan/flashlightPentesters spend too much time during information gathering phase. Flashlight (Fener) provides services to scan network/ports and gather information…
leviathan36/trigmapA wrapper for Nmap to quickly run network scans
patrowl/patrowlhearsPatrowlHears - Vulnerability Intelligence Center / Exploits
k8gege/ciscoexploitCisco Exploit (CVE-2019-1821 Cisco Prime Infrastructure Remote Code Execution/CVE-2019-1653/Cisco SNMP RCE/Dump Cisco RV320 Password)
